Cookies & Local Storage
What we keep on your device, why, and how to change it. Short version: authentication and your own drafts, plus optional analytics you can decline.
Last updated 2 September 2026
1. Your choice
Analytics is off until you accept it, and declining is a single click that we do not ask you about again. You can change your mind at any time:
2. Strictly necessary — cannot be switched off
These make sign-in and basic security work. Without them you could not stay logged in, so there is no consent to give or withdraw.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
| __session | Clerk | Keeps you signed in | Session / 7 days |
| __client_uat | Clerk | Tracks when your sign-in state last changed | Session |
| __clerk_db_jwt | Clerk | Development sign-in token | Session |
| cf_clearance and related | Cloudflare | Turnstile anti-bot check on signed-out pages, so the free demo is not consumed by scripts | Up to 30 minutes |
| tea_cookie_consent | TheEasyApply | Remembers your answer to the banner, so we stop asking | 12 months |
Cloudflare Turnstile receives your IP address as part of the check. We rely on it to protect the signed-out demo, which spends real money on AI calls with no account behind it.
3. Analytics — optional, off by default
| Name | Set by | Purpose | Expires |
|---|---|---|---|
| Vercel Web Analytics | Vercel | Counts page views, referrers and coarse product actions such as sample reviews and exports, aggregated. Event attributes exclude resume text, names and document IDs. No cross-site tracking, no advertising profile, and it does not follow you to other websites. | Not set unless you accept |
With consent, we also keep up to 100 exported resume IDs in this browser to count a second distinct export without transmitting those IDs. Rejecting analytics clears that list. This is the only non-essential analytics service we load, and the script is not requested at all until you accept. We use it to see which pages people actually reach — nothing more.
We do not use Google Analytics, advertising pixels, session replay, or any cross-site tracker.
4. Things kept on your device, not cookies
These stay in your browser and are not readable by us or anyone else — with one exception: the demo draft token is sent to us when you claim that draft after signing up. They are listed because some hold your own resume content, and you should know it is there.
| Key | What it holds | Cleared when |
|---|---|---|
| Demo draft pointer | A token for a resume you pasted into the signed-out demo, so it can be claimed after you sign up | After you claim it, or 24 hours |
| Intake wizard answers | Your in-progress answers while building a resume from scratch, so a refresh does not lose them | When you finish or abandon the wizard |
| Tailor panel draft | A job description you pasted but have not tailored against yet | When you close the tab |
| Design preference | Your last chosen template and density | When you clear site data |
| Walkthrough state | A local mirror of which tours you have seen, to stop them flashing on first paint | When you reset walkthroughs in Settings |
Clearing your browser's site data removes all of these. It will also sign you out and reset your cookie choice, but it will not touch anything saved to your account.
5. Other ways to control this
Every browser lets you block or delete cookies in its settings. Blocking the strictly necessary ones will stop you being able to sign in — that is a limitation of how sign-in works, not a choice we made.
For what happens to data on our servers rather than on your device, see the privacy policy.